Skip to content

Conversation

@evonzee
Copy link
Contributor

@evonzee evonzee commented Oct 25, 2024

Updated all dependencies per Dependabot:

  • Docker python 3.11 to 3.13
  • Github actions updated for checkout, docker setup, build, and push
  • Pip packages
    • aiohappyeyeballs 2.3.7 to 2.4.3
    • aiohttp 3.10.4 to 3.10.10
    • charset-normalizer 3.3.2 to 3.4.0
    • frozenlist 1.4.1 to 1.5.0
    • idna 3.7 to 3.10
    • multidict 6.0.5 to 6.1.0
    • yarl 1.9.4 to 1.16.0

Also stop trying to push to dockerhub for dependabot builds since it has no access to secrets.

Some brief testing with OpenStarbound seems to indicate that everything is still working fine, though I haven't exercised all plugins.

dependabot bot and others added 13 commits October 25, 2024 03:19
Bumps python from 3.11-bookworm to 3.13-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v4...v6)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/checkout-4' into dependency-updates-2024-10-24
…/build-push-action-6' into dependency-updates-2024-10-24
…/login-action-3' into dependency-updates-2024-10-24
…/setup-buildx-action-3' into dependency-updates-2024-10-24
…/setup-qemu-action-3' into dependency-updates-2024-10-24
Copy link
Member

@rubellyte rubellyte left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

None of these dependencies are things we use directly, so if there's no version conflict with the packages that do depend on them, it should be fine.

@rubellyte rubellyte merged commit 08b1ef5 into StarryPy:master Oct 25, 2024
@evonzee evonzee deleted the dependency-updates-2024-10-24 branch October 25, 2024 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants